Onsite Network Security Analyst – SOC & IR

ASSYST, Inc.; Austin, Northern (TX, KY); Hybrid; USD 95,000 - 125,000; Full time

Job summary

ASSYST, Inc. seeks a Network Security Analyst to join the Cyber Operations team in Austin, TX. This onsite role focuses on monitoring security alerts, triaging events, and supporting incident response for a state client. You will analyze threats, maintain documentation, and help with playbooks and procedures.

You will work with SIEM, EDR/XDR, firewalls, cloud services, and threat intel while collaborating across teams to improve detection and response capabilities. Local candidates only.

Qualifications

• Experience in cybersecurity operations, security monitoring, incident response, threat detection, security investigations, or related cybersecurity disciplines.
• Experience triaging security alerts and analyzing security events.
• Experience documenting incident investigations and response activities.
• Experience with cybersecurity frameworks, incident response processes, and threat detection methodologies.
• Experience with SIEM platforms and endpoint/cloud security tools.
• Knowledge of MITRE ATT&CK, IOCs, IOAs, malware and common cyber threats.

Responsibilities

• Monitor, analyze, and triage cybersecurity alerts from security monitoring and detection platforms.
• Investigate security events and suspicious activity to determine severity, scope, and risk.
• Identify, validate, and prioritize potential cybersecurity incidents and elevate threats as appropriate.
• Correlate security events from multiple sources including endpoints, firewalls, IDS/IPS, cloud services, and threat intel feeds.
• Analyze indicators of compromise, phishing activity, malware detections, anomalous user behavior.
• Document security investigations, findings, and response actions in ticketing systems.
• Support incident containment, eradication, and recovery activities.
• Perform vulnerability assessment reviews and support remediation prioritization.
• Assist with alert tuning, threat intel integration, and false-positive analysis.
• Support development and maintenance of security procedures and playbooks.
• Research emerging cyber threats and TTPs.
• Participate in incident response, escalation, and after-action review activities.
• Maintain investigation documentation, metrics, and technical reports.
• Provide support outside normal hours during high-priority incidents.

Skills

Cybersecurity ops

Security monitoring

Incident response

Threat detection

Documentation

SIEM

EDR/XDR

Firewalls

PowerShell/Python

MITRE ATT&CK

Vulnerability mgmt

Tools

Microsoft Sentinel

Splunk

QRadar

ArcSight

LogRhythm

NetWitness

Defender for Endpoint

CrowdStrike

SentinelOne

Job description

ASSYST, Inc. seeks a Network Security Analyst to join the Cyber Operations team in Austin, TX. This onsite role focuses on monitoring security alerts, triaging events, and supporting incident response for a state client. You will analyze threats, maintain documentation, and help with playbooks and procedures.

You will work with SIEM, EDR/XDR, firewalls, cloud services, and threat intel while collaborating across teams to improve detection and response capabilities. Local candidates only.